TI-2025-13954 CVE-2025-15279 · GHSA-cgxg-jvf2-h7v5
Heap-based buffer overflow in FontForge
Priority LOW 36
FontForge GUtils BMP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.
Vulnerabilities
31 records
TI-2025-13953 CVE-2025-15278 · GHSA-grcr-j565-jxh5
Integer overflow in FontForge
Priority LOW 36
FontForge GUtils XBM File Parsing Integer Overflow Remote Code Execution Vulnerability.
TI-2025-13952 CVE-2025-15277 · GHSA-364x-6pf8-6vwj
Heap-based buffer overflow in FontForge
Priority LOW 36
FontForge GUtils SGI File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.
TI-2025-13951 CVE-2025-15276 · GHSA-mv95-mmh4-gvp6
Deserialization of untrusted data in FontForge
Priority LOW 36
FontForge SFD File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability.
TI-2025-13955 CVE-2025-15280 · GHSA-9hg6-8r8x-q6q6
Use after free in FontForge
Priority MEDIUM 41
FontForge SFD File Parsing Use-After-Free Remote Code Execution Vulnerability.
TI-2025-13950 CVE-2025-15275 · GHSA-6465-93fg-6pfr
Heap-based buffer overflow in FontForge
Priority MEDIUM 41
FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.
TI-2025-13949 CVE-2025-15274 · GHSA-6m4m-8948-4883
Heap-based buffer overflow in FontForge
Priority MEDIUM 41
FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.
TI-2025-13948 CVE-2025-15273 · GHSA-w327-296g-78wc
Stack-based buffer overflow in FontForge
Priority MEDIUM 41
FontForge PFB File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability.
TI-2025-13947 CVE-2025-15272 · GHSA-7q3f-q9mp-p2f9
Heap-based buffer overflow in FontForge
Priority MEDIUM 41
FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.
TI-2025-13946 CVE-2025-15271 · GHSA-gwg7-r3vr-jqwf
Improper array index validation in FontForge
Priority MEDIUM 41
FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability.
TI-2025-13945 CVE-2025-15270 · GHSA-hp8x-4h95-9799
Improper array index validation in FontForge
Priority MEDIUM 41
FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability.
TI-2025-13944 CVE-2025-15269 · GHSA-8j84-3r78-7j5x
Use after free in FontForge
Priority MEDIUM 41
FontForge SFD File Parsing Use-After-Free Remote Code Execution Vulnerability.
TI-2025-32277 CVE-2025-50951 · GHSA-x45p-m5jm-48hc
FontForge v20230101 was discovered to contain a memory leak via the utf7toutf8_copy function at /fontforge/sfd.c.
Priority MEDIUM 62
FontForge v20230101 was discovered to contain a memory leak via the utf7toutf8_copy function at /fontforge/sfd.c.
TI-2025-32275 CVE-2025-50949 · GHSA-hw5f-q2pp-q95m
FontForge v20230101 was discovered to contain a memory leak via the component DlgCreate8.
Priority MEDIUM 62
FontForge v20230101 was discovered to contain a memory leak via the component DlgCreate8.
TI-2024-16541 CVE-2024-25082 · GHSA-2j3h-j2q3-wxp3
Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files.
Priority LOW 33
Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files.
TI-2024-16540 CVE-2024-25081 · GHSA-rjx3-xwwm-jhj5
Splinefont in FontForge through 20230101 allows command injection via crafted filenames.
Priority LOW 24
Splinefont in FontForge through 20230101 allows command injection via crafted filenames.
TI-2020-15706 CVE-2020-25690 · GHSA-8m73-qxc4-m26m
Memory corruption in fontforge
Priority MEDIUM 41
An out-of-bounds write flaw was found in FontForge in versions before 20200314 while parsing SFD files containing certain LayerCount tokens.
TI-2020-04474 CVE-2020-5496 · GHSA-v4hc-3q2q-94jp
FontForge 20190801 has a heap-based buffer overflow in the Type2NotDefSplines() function in splinesave.c.
Priority MEDIUM 43
FontForge 20190801 has a heap-based buffer overflow in the Type2NotDefSplines() function in splinesave.c.
TI-2020-04441 CVE-2020-5395 · GHSA-hjq7-xwrq-jpwv
FontForge 20190801 has a use-after-free in SFD_GetFontMetaData in sfd.c.
Priority MEDIUM 43
FontForge 20190801 has a use-after-free in SFD_GetFontMetaData in sfd.c.
TI-2019-11856 CVE-2019-15785 · GHSA-qp2p-2wx4-5vff
FontForge 20190813 through 20190820 has a buffer overflow in PrefsUI_LoadPrefs in prefs.c.
Priority MEDIUM 47
FontForge 20190813 through 20190820 has a buffer overflow in PrefsUI_LoadPrefs in prefs.c.
TI-2017-12798 CVE-2017-17521 · GHSA-8vv4-vqx2-f85v
uiutil.c in FontForge through 20170731 does not validate strings before launching the…
Priority MEDIUM 42
uiutil.c in FontForge through 20170731 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a…
TI-2017-08571 CVE-2017-11577 · GHSA-rh9j-c22r-vxgv
FontForge 20161012 is vulnerable to a buffer over-read in getsid (parsettf.c) resulting…
Priority LOW 37
FontForge 20161012 is vulnerable to a buffer over-read in getsid (parsettf.c) resulting in DoS or code execution via a crafted otf file.
TI-2017-08570 CVE-2017-11576 · GHSA-f6j8-4mx6-p423
FontForge 20161012 does not ensure a positive size in a weight vector memcpy call in…
Priority LOW 26
FontForge 20161012 does not ensure a positive size in a weight vector memcpy call in readcfftopdict (parsettf.c) resulting in DoS via a crafted otf file.
TI-2017-08569 CVE-2017-11575 · GHSA-5f6g-6ff4-96qp
FontForge 20161012 is vulnerable to a buffer over-read in strnmatch (char.c) resulting in…
Priority LOW 37
FontForge 20161012 is vulnerable to a buffer over-read in strnmatch (char.c) resulting in DoS or code execution via a crafted otf file, related to a call from the readttfcopyrights function in parsettf.c.
TI-2017-08568 CVE-2017-11574 · GHSA-pjhf-w726-7xhc
FontForge 20161012 is vulnerable to a heap-based buffer overflow in readcffset…
Priority LOW 37
FontForge 20161012 is vulnerable to a heap-based buffer overflow in readcffset (parsettf.c) resulting in DoS or code execution via a crafted otf file.